Skip to content

Commit cd727bb

Browse files
fix(deps): Resolve all npm audit vulnerabilities (#3199)
Update dependencies and add overrides to fix security vulnerabilities: Root package: - Bump protobufjs ^7.3.0 -> ^7.5.5 (critical: arbitrary code execution) - Add overrides for fast-xml-parser, serialize-javascript, picomatch, flatted, brace-expansion, yaml, underscore, lodash, minimatch demos/browser: - Bump vite ^7.3.1 -> ^7.3.2 (high: path traversal, WebSocket read) - Bump lodash ^4.17.20 -> ^4.17.24 (high: prototype pollution) - Add overrides for fast-xml-parser, picomatch integration: - Bump mocha ^10.2.0 -> ^10.8.2 - Add overrides for fast-xml-parser, serialize-javascript, picomatch, brace-expansion All three directories now report 0 vulnerabilities from npm audit. Addresses all open dependabot PRs for these packages.
1 parent 1b08327 commit cd727bb

6 files changed

Lines changed: 4300 additions & 12273 deletions

File tree

0 commit comments

Comments
 (0)